TI Outside the United States. You shall only Use TI outside the United States or Disclose TI to any person or entity outside the United States to the extent such Use or Disclosure is permitted or required by Applicable Law and the Use or Disclosure is conducted in conformance with the HIPAA Security Rule, regardless of whether You are a Covered Entity or Business Associate and as set forth in an applicable SOP.
TI Outside the United States. Participant shall not Use TI outside the United States or Disclose TI to any person or entity outside the United States except to the extent such Use or Disclosure is permitted or required by Applicable Law and except to the extent the Use or Disclosure is conducted in conformance with the HIPAA Security Rule, regardless of whether Participant is a Covered Entity or Business Associate. Participant shall evaluate the risks of any extraterritorial Uses and/or Disclosures of TI, if applicable, as part of an annual security assessment and prior to any new or substantially different type of non- U.S. Use(s) or Disclosure(s). Such security assessment shall include a risk assessment to evaluate whether the Uses or Disclosures of Individually Identifiable information that is reasonably believed to be TI by or to persons or entities outside the United States satisfies the requirements of the HIPAA Security Rule. The foregoing does not modify or eliminate any provision of Applicable Law that does not permit Participant to Disclose Individually Identifiable information to a person or entity outside the United States or that imposes conditions or limitations on such Disclosure.
